Re: [cobalt-users] Found a worm in my admin mail spool

[shimi <shimi@xxxxxxxxxxxxxxxx>]

On Sun, 27 May 2001, Jorge Ceballos wrote:

> 
> 
> Hi everybody,
> 
> I noticed the unfamous dwarf mail in my mail spool and couldn't erase it.
> Then, I found a file called "dead.letter" in the spool, downloaded it and 
> scanned it and found it contained the "w95.hybris.worm" .
> Now, I erased the "dead.letter" and the mail as SU.
> The server seems ok and everything is running fine.
> One or two activities running, available memory is ok, niece is 0%, etc.
> 
> My question is if this worm affects linux OS somehow , as I thought this 
> affected only windows OS.
> Seems like one of my customers' computer is infected and as the self 
> sending email could not find an address, it came back to me as a mail error.
> Any suggestions for not letting this happen again?
> 
> Regards,
> 
> Jorge Ceballos

I am not familiar with the warm, but, even if it was for linux - the only
application in the world that executes attachments without asking the user
is Microsoft Outlook. All other mail readers are familiar with the term
"security".

Anyhow, the dead.letter file...
that file is created when you dump pine in the middle of writing a letter.
For later recovery, it saves the contents of what you've already wrote, in
a file named dead.letter (now you understand the name).

So, I guess you can feel ok :-)

- shimi.